Creative Cloud Desktop App with Elevated Privileges - Security implications (Mac)

Question

I would like to package and install the Creative Cloud Desktop app for our Mac users, and use the Elevated Privileges option so that they do not require an admin password to update or install new Adobe CC apps.

I would still need the users to be unable to make changes and install other software without an admin password.

I have tried this on one machine and it seems to work fine, it was also encouraging that when coming to install some non Creative Cloud software it still prompted for an admin password.

My IT Security department are looking for some reassurance and have raised a couple of questions:

A) How does it suppress the use account control for only the Creative Cloud products and not others?

B) How secure it is/does it compromise security in any way by enabling Elevated Privileges?

Any help in answering these questions would be greatly appreciated.

Many thanks

Struan

___Dom___ · Accepted Answer

Hi Struan,I can't reveal any details regarding the security of the mechanism which is used, but I can answer your question in relation to the way in which Creative Cloud products are installed:A service is installed alongside the Creative Cloud Desktop application which runs with system privileges; when the user selects to install a particular application, the installation is performed by this service, which allows it to proceed without requiring the user to have administrative privileges.I hope that helps,Dominic

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.